$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: eETHK7h1L7v3tpXdgdbAtF11JW7JPf77/xPsaqhUgW4= Subject key identifier: 33:61:00:EE:76:B1:C7:4B:B3:43:A5:1F:7E:82:A0:A4:1A:6F:B8:22 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 0A04E20314F4A6FE7E6FE2116ED18956B104BE9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04E8 Signing time: Sat 28 Jun 2025 20:41:27 +0000 Manifest this update: Sat 28 Jun 2025 20:36:27 +0000 Manifest next update: Wed 02 Jul 2025 08:31:27 +0000 Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) 2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: 8Ejc1iDI9b8JyyfWt8Bxz5KuAKNf1fJvZEUqDiLhmhI=) 3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:04:e2:03:14:f4:a6:fe:7e:6f:e2:11:6e:d1:89:56:b1:04:be:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Jun 28 20:36:27 2025 GMT Not After : Jul 2 08:31:27 2025 GMT Subject: CN=336100EE76B1C74BB343A51F7E82A0A41A6FB822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:6a:e8:39:6d:01:3b:d0:e8:d7:ac:52:9e: 08:5d:33:69:42:e4:b5:cf:11:27:a9:9a:f9:f8:99: 46:3e:b7:8f:ed:aa:7d:3e:41:2f:8d:65:0b:aa:5b: 0a:37:c8:19:03:40:19:2f:7d:6d:31:bb:e8:79:47: 4a:ba:ea:43:76:00:55:cd:cc:3d:54:4e:f7:00:0c: a3:4d:47:07:56:97:f3:b6:5f:dd:1f:3f:20:4f:39: 18:cb:bc:fb:bc:61:d5:83:5c:40:60:4e:e6:9e:ec: 0b:bf:44:86:ee:14:d7:98:fc:d3:4b:fb:66:a3:24: 74:d2:73:54:82:ad:43:6a:d2:65:eb:2c:36:e7:30: ed:53:b6:14:7b:47:44:b2:16:4b:90:85:3d:f1:66: 8a:df:75:10:c1:7e:3e:7e:b3:8c:b7:27:d1:4a:fa: 1f:bc:55:75:95:38:1f:ae:31:30:9e:a3:52:63:63: ba:30:53:24:0e:b0:5f:10:05:86:37:b6:8e:43:3f: 4d:c4:d9:d8:25:7c:b8:44:7a:bf:6d:a1:75:e6:e1: 9b:9d:9f:44:cc:57:00:eb:bd:8a:cc:01:3d:2d:63: a2:75:7c:6c:66:d0:61:75:00:9b:83:17:03:00:8c: cc:50:7c:ae:c5:1d:dc:ef:9d:4d:2b:e1:9b:c7:42: 71:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:00:EE:76:B1:C7:4B:B3:43:A5:1F:7E:82:A0:A4:1A:6F:B8:22 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bc:8c:35:65:19:80:c0:88:a3:9d:75:27:85:41:39:fe:55: 6a:09:a7:2b:25:ad:67:7c:05:80:4d:f9:dd:69:ea:c7:cb:4a: 6c:a7:29:be:32:66:03:e5:18:fa:10:6d:4a:f9:ff:16:f3:00: d6:10:d8:cd:b4:9e:b2:58:40:51:ec:15:4f:af:d3:9e:85:34: 59:ce:82:c3:bc:c3:3f:f4:31:7a:6e:8b:95:83:b6:f9:d5:e6: f9:ef:a1:f0:b7:54:e3:e2:c7:b7:69:06:6f:6a:a5:83:81:8d: 2d:cb:95:9c:b0:dd:b0:dc:29:c6:de:ac:c1:a4:cf:57:4c:ac: 86:4c:0d:e7:07:84:13:78:42:89:ff:2d:4f:5b:23:14:69:27: c4:ef:cc:b5:24:54:f7:46:7a:a5:cf:f8:74:fd:b7:ed:8e:09: 9c:0e:17:11:91:ed:a5:05:b5:ce:c0:f5:61:9f:65:ad:3b:02: e3:e1:f0:f4:60:35:1e:87:ef:22:43:d7:70:f1:ad:dc:fa:03: e2:ec:95:5d:ec:15:c0:f9:d1:74:94:68:de:f9:aa:39:81:ca: 13:d1:41:22:13:79:39:a3:f4:c1:ff:a8:6b:af:cd:4f:f1:b1: 07:46:f4:17:5f:31:e7:ae:2f:54:b0:ca:10:71:c7:c9:d0:08: ed:4e:cc:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgTiAxT0pv5+b+IRbtGJVrEEvpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA2MjgyMDM2MjdaFw0yNTA3MDIwODMxMjdaMDMxMTAvBgNV BAMTKDMzNjEwMEVFNzZCMUM3NEJCMzQzQTUxRjdFODJBMEE0MUE2RkI4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8mroOW0BO9Do16xSnghdM2lC 5LXPESepmvn4mUY+t4/tqn0+QS+NZQuqWwo3yBkDQBkvfW0xu+h5R0q66kN2AFXN zD1UTvcADKNNRwdWl/O2X90fPyBPORjLvPu8YdWDXEBgTuae7Au/RIbuFNeY/NNL +2ajJHTSc1SCrUNq0mXrLDbnMO1TthR7R0SyFkuQhT3xZorfdRDBfj5+s4y3J9FK +h+8VXWVOB+uMTCeo1JjY7owUyQOsF8QBYY3to5DP03E2dglfLhEer9toXXm4Zud n0TMVwDrvYrMAT0tY6J1fGxm0GF1AJuDFwMAjMxQfK7FHdzvnU0r4ZvHQnEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM2EA7naxx0uzQ6UffoKgpBpvuCIwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+8jDVlGYDAiKOddSeFQTn+VWoJpyslrWd8 BYBN+d1p6sfLSmynKb4yZgPlGPoQbUr5/xbzANYQ2M20nrJYQFHsFU+v056FNFnO gsO8wz/0MXpui5WDtvnV5vnvofC3VOPix7dpBm9qpYOBjS3LlZyw3bDcKcberMGk z1dMrIZMDecHhBN4Qon/LU9bIxRpJ8TvzLUkVPdGeqXP+HT9t+2OCZwOFxGR7aUF tc7A9WGfZa07AuPh8PRgNR6H7yJD13Dxrdz6A+LslV3sFcD50XSUaN75qjmByhPR QSITeTmj9MH/qGuvzU/xsQdG9BdfMeeuL1SwyhBxx8nQCO1OzBE= -----END CERTIFICATE-----Generated at Tue Jul 1 03:00:04 2025 by rpki-client